CVE-2002-0811

security flaw

Published Jul 31, 2002 CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Description
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2002-0803 Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 3:03 AM
Reserved
Jul 29, 2002, 12:00 AM
Status
Modified
Published
Aug 12, 2002, 4:00 AM
Modified
Jun 16, 2026, 9:58 PM
Severity
Public date
Jun 8, 2002, 12:00 AM